% for user, config in sorted(node.metadata.get('icinga2/api_users', {}).items()):
object ApiUser "${user}" {
password = "${config['password']}"
permissions = [ "${'", "'.join(sorted(config['permissions']))}" ]
}
% endfor